How sanctions get enforced in practice

The United States Treasury's Office of Foreign Assets Control issues sanctions designations and publishes the Specially Designated Nationals list. That is the public-facing layer. The enforcement layer is different and worth understanding because it shapes what sanctions actually accomplish.

Banks are the practical enforcement point. When a wire instruction arrives, the receiving bank's screening software runs the names of the sender, the recipient, and the beneficiary against the SDN list and several adjacent lists from the EU, UK, UN, and others. A hit halts the wire automatically. A near-hit goes to a human reviewer.

Most sanctions cases are not yes-or-no matches. They are probability questions. Is this entity related to a sanctioned party? Does the trade route suggest evasion? Is the commodity dual-use? Compliance officers make these calls under regulatory pressure that errs heavily toward refusal. The penalty for processing a sanctioned transaction can run into hundreds of millions of dollars. The penalty for refusing a legitimate transaction is an angry customer.

This asymmetry produces what practitioners call over-compliance. Banks refuse business that probably is legal because the cost of being wrong is too high. Whole categories of legitimate trade with sanctioned jurisdictions — humanitarian goods, food, medicine — slow to a crawl even when explicit carve-outs exist on paper.

OFAC has issued more and more general licences in recent years to try to counter this dynamic. A general licence authorizes a category of transactions without case-by-case review. Banks still hesitate because general licences have conditions, and proving the conditions were met is the bank's responsibility.

Enforcement against actual evasion happens through several channels. OFAC and the Department of Justice can prosecute individuals and entities. Banks themselves are routinely investigated for compliance failures, with settlements in the hundreds of millions. Civil society groups and investigative journalists surface evasion networks that regulators then act on.

The non-US enforcement picture is patchier. The EU has parallel designation lists but lighter penalties. The UK now runs its own post-Brexit regime. Switzerland enforces UN sanctions but tracks EU and US lists selectively. A target who can shift through a jurisdiction with looser enforcement gains breathing space.

Several practical features of the system deserve more attention. Beneficial-ownership opacity is the most exploited evasion route. Shell companies registered in cooperative jurisdictions can hold assets for sanctioned parties while disguising the true ultimate owner. International transparency standards, particularly the Financial Action Task Force recommendations, have tightened over the past decade. But enforcement uniformity remains uneven, and the easiest jurisdictions for shell formation tend to be the slowest to adopt beneficial-ownership registers.

Cryptocurrency channels are a related concern. Major stablecoins and centralized exchanges now screen against sanctions lists with comparable rigor to banks, but smaller exchanges and decentralized protocols vary widely in practice. Specialized blockchain-analytics firms support enforcement by tracing transaction flows, and sanctioned entities increasingly find that on-chain movement is easier to track than off-chain trade-finance arrangements. The popular framing that cryptocurrency enables wholesale evasion overstates what the data actually shows.

Maritime trade is the harder enforcement domain. Sanctioned oil cargoes are routinely transferred ship-to-ship at sea, rebranded under different vessel names, or transported by older tankers operating outside major-port jurisdiction. The OFAC price-cap policy on Russian oil tried to address this with service-side restrictions on insurance and shipping rather than direct embargo. Empirical work on enforcement effectiveness is still developing.

Secondary-sanctions risk shapes how third-country firms behave even without direct designations. A firm in a country that has not joined the sanctions regime may still avoid sanctioned counterparties to preserve access to the US or EU financial system. This indirect compliance is the largest channel through which extraterritorial sanctions work in practice, and it is also the most resented externally because it amounts to imposing the sanctioning state's policy on non-participating jurisdictions. Various capitals have discussed blocking statutes to counter the effect, with mixed implementation that has rarely produced durable protection for the firms the statutes ostensibly defend.

What this means for policy design is that announcing a sanction is only the first step. Without compliance guidance, banks will over-comply on legitimate trade and under-detect actual evasion. Without coordinated enforcement, targets simply route around the weakest link. Sanctions effectiveness lives in the operational tail, not the political announcement.